This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json) Hash identifier: nGCmMlEW+zYDt+UwnizG9geX4a9q22AeCanI9TGXc5o= Subject key identifier: E9:CF:D9:89:52:97:AA:A4:40:27:BF:A0:AC:D0:92:7F:1C:F9:68:EB Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4 Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4 Certificate serial: 019B77B790DABB71F990B600878E5552864E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft Manifest number: 0EF2 Signing time: Thu 01 Jan 2026 04:01:17 +0000 Manifest this update: Thu 01 Jan 2026 04:01:17 +0000 Manifest next update: Fri 02 Jan 2026 04:01:17 +0000 Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: misqB15grxi9vzmToPIyvTq5sAKYjdqC1RcPnVQI8sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:b7:90:da:bb:71:f9:90:b6:00:87:8e:55:52:86:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4 Validity Not Before: Jan 1 04:01:17 2026 GMT Not After : Jan 2 04:01:17 2026 GMT Subject: CN=e9cfd9895297aaa44027bfa0acd0927f1cf968eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:21:2f:1d:a8:ae:35:ec:91:be:60:3e:a3: 74:14:32:38:6f:c7:da:17:77:9e:a2:61:f1:35:e0: 5c:0d:3f:35:88:ec:5e:43:8b:ed:0d:15:c5:e6:33: 7d:5c:1f:2f:16:00:82:4d:87:66:1e:70:3b:ee:94: 90:a1:d6:61:1c:0e:29:52:34:26:bf:66:df:aa:c4: 26:2d:d2:23:4e:1e:18:2b:25:45:a8:e6:4e:e1:1f: fc:18:19:1c:fc:13:91:8a:04:fa:76:c9:25:7a:e6: 42:ae:32:68:51:0b:14:ef:5e:7a:a0:1f:72:40:1c: 86:ed:3f:9e:de:00:64:2a:13:fd:e6:6f:d4:ab:14: 48:29:9f:f3:47:25:ed:b7:57:70:42:0f:d2:c6:8b: 94:6d:9e:7d:96:44:c0:a9:5d:fa:80:4b:02:be:62: 85:03:a1:58:45:9d:43:9e:34:e2:0f:47:fb:b9:84: 45:4d:fd:c5:6b:bf:4b:e6:3d:53:9b:ad:d4:bb:47: 02:f5:4e:9a:3d:b5:ae:9a:2b:0d:d9:5b:b2:02:44: 7e:d8:48:88:28:1e:f5:14:b0:c6:5f:c3:1a:c5:b7: 8f:f9:f2:0c:a7:37:53:61:ce:61:47:7d:0c:ca:f1: ec:74:37:e6:5a:44:0b:d7:bb:54:e4:03:d1:06:b7: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CF:D9:89:52:97:AA:A4:40:27:BF:A0:AC:D0:92:7F:1C:F9:68:EB X509v3 Authority Key Identifier: keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:79:51:da:8f:50:94:40:ed:0e:8b:74:68:37:32:87:07:c8: 96:42:9a:b8:fb:10:20:17:5a:75:c1:60:99:ca:8b:4f:08:8c: 88:26:b6:34:8d:66:f2:3d:53:a5:e4:52:3e:43:f2:c5:b6:bb: 1b:98:9f:7b:6d:46:49:15:13:7f:a5:01:9b:51:82:29:3d:8d: 7a:9d:12:03:c2:b2:14:55:84:66:54:bb:c0:31:b1:5c:98:d9: 7a:80:83:37:f5:58:09:af:d6:d9:f3:5a:1b:21:99:d7:d4:ee: c6:b0:a0:b5:3f:ba:d5:5a:7f:28:f9:c0:89:39:b7:6a:a3:be: 59:b2:2b:e0:f8:e4:20:3c:bf:f1:27:ba:fb:fb:8f:bc:7d:0e: 4b:c5:1d:a9:9d:b1:ce:18:a1:67:af:e5:71:60:34:50:92:fd: 98:35:58:84:0a:ba:39:71:05:c7:15:a7:ef:08:ff:62:81:9d: 6c:5f:55:f8:39:bf:b4:04:96:4d:a7:66:ed:6d:8e:d1:ab:63: 7c:81:ee:b2:a4:9c:17:aa:bc:30:82:07:07:c8:e7:1b:a2:34: cd:c8:45:4b:99:7d:55:26:28:73:9a:1b:d3:10:36:b6:e7:ac: ca:2d:0d:1b:21:88:9c:7b:dc:95:22:be:ec:19:f8:ff:fb:1f: a0:71:1c:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3t5Dau3H5kLYAh45VUoZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx NGJmYzQwHhcNMjYwMTAxMDQwMTE3WhcNMjYwMTAyMDQwMTE3WjAzMTEwLwYDVQQD EyhlOWNmZDk4OTUyOTdhYWE0NDAyN2JmYTBhY2QwOTI3ZjFjZjk2OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VYhLx2orjXskb5gPqN0FDI4b8fa F3eeomHxNeBcDT81iOxeQ4vtDRXF5jN9XB8vFgCCTYdmHnA77pSQodZhHA4pUjQm v2bfqsQmLdIjTh4YKyVFqOZO4R/8GBkc/BORigT6dskleuZCrjJoUQsU7156oB9y QByG7T+e3gBkKhP95m/UqxRIKZ/zRyXtt1dwQg/SxouUbZ59lkTAqV36gEsCvmKF A6FYRZ1DnjTiD0f7uYRFTf3Fa79L5j1Tm63Uu0cC9U6aPbWumisN2VuyAkR+2EiI KB71FLDGX8MaxbeP+fIMpzdTYc5hR30MyvHsdDfmWkQL17tU5APRBrdZ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnP2YlSl6qkQCe/oKzQkn8c+WjrMB8GA1UdIwQY MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3 LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3lR2o9Q lEDtDot0aDcyhwfIlkKauPsQIBdadcFgmcqLTwiMiCa2NI1m8j1TpeRSPkPyxba7 G5ife21GSRUTf6UBm1GCKT2Nep0SA8KyFFWEZlS7wDGxXJjZeoCDN/VYCa/W2fNa GyGZ19TuxrCgtT+61Vp/KPnAiTm3aqO+WbIr4PjkIDy/8Se6+/uPvH0OS8UdqZ2x zhihZ6/lcWA0UJL9mDVYhAq6OXEFxxWn7wj/YoGdbF9V+Dm/tASWTadm7W2O0atj fIHusqScF6q8MIIHB8jnG6I0zchFS5l9VSYoc5ob0xA2tuesyi0NGyGInHvclSK+ 7Bn4//sfoHEc5Q== -----END CERTIFICATE-----Generated at Thu Jan 1 14:10:51 2026 by rpki-client